Найти в Дзене

10. Настройка обмена маршрутной информацией по протоколу BGP и NAT на RTR-COD

Источник http://altlinuxmetod.ru/?page_id=385 ecorouter>show port brief
Name Physical Admin Lacp Last Change Description
--------------------------------------------------------------------------
te0 UP UP * 02h:17m:24s ago
te1 UP UP * 02h:17m:24s ago
ecorouter> enable
configure terminal
hostname rtr-cod
ip domain-name au.team
username net_admin
password P@ssw0rd
role admin
exit
interface int0
description "Connect-to-ISP"
ip address 34.95.33.33/24
exit
port te0
service-instance te0/int0
encapsulation untagged
connect ip interface int0
exit
exit
interface int1
description "Connect-to-SW-COD"
ip address 172.16.1.254/23
exit
port te1
service-instance te1/int1
encapsulation untagged
connect ip interface int1
exit
exit
write memory rtr-cod#show hostname
rtr-cod
rtr-cod#show run | include ip domain-name
ip domain-name au.team
rtr-cod#show users localdb
User: admin
Description: Ad

Источник http://altlinuxmetod.ru/?page_id=385

RTR-COD:

  • В настоящий момент имеет:te0 — порт в сторону ISP
    te1
    — порт в сторону SW-COD

ecorouter>show port brief
Name Physical Admin Lacp Last Change Description
--------------------------------------------------------------------------
te0 UP UP * 02h:17m:24s ago
te1 UP UP * 02h:17m:24s ago
ecorouter>

  • Базовая настройка:имя
    адресация в соответствие с L3
    требуемый пользователь

enable
configure terminal
hostname rtr-cod
ip domain-name au.team

username net_admin
password P@ssw0rd
role admin
exit

interface int0
description "Connect-to-ISP"
ip address 34.95.33.33/24
exit

port te0
service-instance te0/int0
encapsulation untagged
connect ip interface int0
exit
exit

interface int1
description "Connect-to-SW-COD"
ip address 172.16.1.254/23
exit

port te1
service-instance te1/int1
encapsulation untagged
connect ip interface int1
exit
exit

write memory

  • Проверить:

rtr-cod#show hostname
rtr-cod
rtr-cod#show run | include ip domain-name
ip domain-name au.team
rtr-cod#show users localdb
User: admin
Description: Administrator User
Docker socket access: disabled
VR:
pvr
Roles:
admin
User: daemon
Description: The user is used to get configuration data
Docker socket access: disabled
VR:
pvr
Roles:
daemon
User: net_admin
Description:
Docker socket access: disabled
VR:
pvr
Roles:
admin
rtr-cod#show ip int br
Interface IP-Address Status VRF
----------------------------------------------------------------
int0 34.95.33.33/24 up default
int1 172.16.1.254/23 up default
rtr-cod#ping 34.95.33.254
PING 34.95.33.254 (34.95.33.254) 56(84) bytes of data.
64 bytes from 34.95.33.254: icmp_seq=1 ttl=64 time=14.7 ms
64 bytes from 34.95.33.254: icmp_seq=2 ttl=64 time=13.7 ms
64 bytes from 34.95.33.254: icmp_seq=3 ttl=64 time=12.9 ms

--- 34.95.33.254 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 12.866/13.725/14.654/0.731 ms
rtr-cod#

  • Настройка BGP:

conf t

router bgp 64499
bgp router-id 34.95.33.33
neighbor 34.95.33.254 remote-as 64499
exit

write memory

  • Проверить:

rtr-cod#show ip bgp summary
BGP router identifier 34.95.33.33, local AS number 64499
BGP table version is 2
1 BGP AS-PATH entries
0 BGP community entries

Neighbor V AS MsgRcv MsgSen TblVer InQ OutQ Up/Down State/PfxRcd
-------------------------------------------------------------------------------------------
34.95.33.254 4 64499 5 2 2 0 0 00:00:19 2

Total number of neighbors 1

Total number of Established sessions 1
rtr-cod#show ip route
Codes: C - connected, S - static, R - RIP, B - BGP
O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default

IP Route Table for VRF "default"
Gateway of last resort is 34.95.33.254 to network 0.0.0.0

B* 0.0.0.0/0 [200/0] via 34.95.33.254, int0, 00:00:16
C 34.95.33.0/24 is directly connected, int0
B 100.64.0.0/16 [200/0] via 34.95.33.254, int0, 00:00:16
C 172.16.0.0/23 is directly connected, int1
rtr-cod#ping 77.88.8.8
PING 77.88.8.8 (77.88.8.8) 56(84) bytes of data.
64 bytes from 77.88.8.8: icmp_seq=1 ttl=55 time=40.1 ms
64 bytes from 77.88.8.8: icmp_seq=2 ttl=55 time=31.9 ms
64 bytes from 77.88.8.8: icmp_seq=3 ttl=55 time=38.7 ms

--- 77.88.8.8 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2001ms
rtt min/avg/max/mdev = 31.865/36.882/40.050/3.588 ms
rtr-cod#

  • Настройка NAT:

conf t

interface int0
ip nat outside
exit

interface int1
ip nat inside
exit

ip nat pool COD 172.16.0.1-172.16.1.254

ip nat source dynamic inside-to-outside pool COD overload interface int0
write memory